Pptp unter Sles 9 über Dsl-zugang Ohne ext. Router

#1 Nach mehreren Tagen Recherche muß ich nun eine glaube ich doch neue Frage stellen:

Erstmal die Konstellation:
Linux-Router mit eth0 als internem Netz und ppp0, was direkt über PPPoE auf ein DSL-Modem und dort auf einen T-Online-DSL geht; Firewall laut Anleitung konfiguriert, PoPToP konfiguriert;

Zustand:
Von einem Win2000-PC innerhalb eth0 kann ich ohne Probleme die VPN-Verbindung aufbauen, er legt dann auch ein Interface ppp1 an, worüber das VPN läuft;

Sobald ich von aussen komme, bricht er nach den Zugangverhandlungen (Benutzername/Kennwort) undefiniert ab, scheinbar in dem Moment, wo er das ppp1 aktivieren möchte;

Scheinbar schafft er es nicht, ppp1 durch ppp0 zu tunneln? Ist da irgendwas bekannt, wie man das lösen kann? Alle Hilfetexte, die ich finde, sprechen entweder von externem Router oder äußern sich nicht explizit zum Netzzugang?!

Anbei noch als kurze Info ein paar Systemdetails:

options.pptp:
lock
auth
require-chap

(minimalisiert, alles weitere spielt für das Problem glaub ich keine Rolle, Verschlüsselung usw. hab ich erstmal alles weggelassen)

pptpd.conf:
option /etc/ppp/options.pptp
debug
localip 192.168.66.1
remoteip 192.168.66.2
pidfile /var/run/pptpd.pid

Wiegesagt - über eth0 aufgebaut geht die Verbindung, von aussen nicht... Hier noch etwas Log-Code, aus dem Syslog - vielleicht steht da noch was?

Der funktionierende - interne Aufbau:

Zitat

Apr 15 14:24:35 leila pptpd[20974]: MGR: Launching /usr/sbin/pptpctrl to handle client
Apr 15 14:24:35 leila pptpd[20974]: CTRL: local address = 192.168.66.1
Apr 15 14:24:35 leila pptpd[20974]: CTRL: remote address = 192.168.66.2
Apr 15 14:24:35 leila pptpd[20974]: CTRL: pppd speed = 115200
Apr 15 14:24:35 leila pptpd[20974]: CTRL: pppd options file = /etc/ppp/options.pptp
Apr 15 14:24:35 leila pptpd[20974]: CTRL: Client 192.168.1.24 control connection started
Apr 15 14:24:35 leila pptpd[20974]: CTRL: Received PPTP Control Message (type: 1)
Apr 15 14:24:35 leila pptpd[20974]: CTRL: Made a START CTRL CONN RPLY packet
Apr 15 14:24:35 leila pptpd[20974]: CTRL: I wrote 156 bytes to the client.
Apr 15 14:24:35 leila pptpd[20974]: CTRL: Sent packet to client
Apr 15 14:24:35 leila pptpd[18921]: MGR: No free connection slots or IPs - no more clients can connect!
Apr 15 14:24:35 leila pptpd[20974]: CTRL: Received PPTP Control Message (type: 7)
Apr 15 14:24:35 leila pptpd[20974]: CTRL: 0 min_bps, 1525 max_bps, 32 window size
Apr 15 14:24:35 leila pptpd[20974]: CTRL: Made a OUT CALL RPLY packet
Apr 15 14:24:35 leila pptpd[20974]: CTRL: Starting call (launching pppd, opening GRE)
Apr 15 14:24:35 leila pptpd[20974]: CTRL: pty_fd = 5
Apr 15 14:24:35 leila pptpd[20974]: CTRL: tty_fd = 6
Apr 15 14:24:35 leila pptpd[20975]: CTRL (PPPD Launcher): Connection speed = 115200
Apr 15 14:24:35 leila pptpd[20975]: CTRL (PPPD Launcher): local address = 192.168.66.1
Apr 15 14:24:35 leila pptpd[20975]: CTRL (PPPD Launcher): remote address = 192.168.66.2
Apr 15 14:24:35 leila pppd[20975]: pppd 2.4.2 started by root, uid 0
Apr 15 14:24:35 leila pptpd[20974]: CTRL: I wrote 32 bytes to the client.
Apr 15 14:24:35 leila pptpd[20974]: CTRL: Sent packet to client
Apr 15 14:24:35 leila pppd[20975]: Using interface ppp1
Apr 15 14:24:35 leila pptpd[20974]: CTRL: Received PPTP Control Message (type: 15)
Apr 15 14:24:35 leila pptpd[20974]: CTRL: Got a SET LINK INFO packet with standard ACCMs
Apr 15 14:24:35 leila pppd[20975]: Connect: ppp1 <--> /dev/pts/2
Apr 15 14:24:35 leila pptpd[20974]: CTRL: Received PPTP Control Message (type: 15)
Apr 15 14:24:35 leila pptpd[20974]: CTRL: Ignored a SET LINK INFO packet with real ACCMs!
Apr 15 14:24:35 leila pppd[20975]: Cannot determine ethernet address for proxy ARP
Apr 15 14:24:35 leila pppd[20975]: local IP address 192.168.66.1
Apr 15 14:24:35 leila pppd[20975]: remote IP address 192.168.66.2

// Der Firewall-Kram kommt vom Samba / Windows-Unterhaltung, ist aber unwichtig

Apr 15 14:24:35 leila kernel: SFW2-IN-ILL-TARGET IN=ppp1 OUT= MAC= SRC=192.168.66.2 DST=255.255.255.255 LEN=96 TOS=0x00 PREC=0x00 TTL=128 ID=51899 PROTO=UDP SPT=137 DPT=137 LEN=76
Apr 15 14:24:35 leila ip-up: Warning: detected activated samba, enabling FW_SERVICE_SMB!
Apr 15 14:24:35 leila ip-up: You still have to allow tcp port 139 on internal, dmz and/or external.
Apr 15 14:24:35 leila kernel: SFW2-IN-ACC_DENIED_INT IN=eth0 OUT= MAC=00:30:6e:39:f7:4c:00:0c:f1:6c:b3:97:08:00 SRC=192.168.1.24 DST=84.148.200.181 LEN=129 TOS=0x00 PREC=0x00 TTL=128 ID=51908 PROTO=47
Apr 15 14:24:36 leila kernel: SFW2-IN-ILL-TARGET IN=ppp0 OUT= MAC= SRC=84.148.170.205 DST=84.148.200.181 LEN=52 TOS=0x00 PREC=0x00 TTL=127 ID=37367 DF PROTO=TCP SPT=2424 DPT=135 WINDOW=32767 RES=0x00 SYN URGP=0 OPT (020405AC0103030001010402)
Apr 15 14:24:36 leila pptpd[20974]: Buffering out-of-order packet; got 18 after 16
Apr 15 14:24:37 leila pptpd[20974]: Buffering out-of-order packet; got 19 after 16
Apr 15 14:24:38 leila pptpd[20974]: Packet reorder timeout waiting for 17
Apr 15 14:24:38 leila pptpd[20974]: Buffering out-of-order packet; got 20 after 17
Apr 15 14:24:38 leila kernel: SFW2-IN-ILL-TARGET IN=ppp1 OUT= MAC= SRC=192.168.66.2 DST=255.255.255.255 LEN=96 TOS=0x00 PREC=0x00 TTL=128 ID=51910 PROTO=UDP SPT=137 DPT=137 LEN=76
Apr 15 14:24:38 leila kernel: SFW2-IN-ILL-TARGET IN=ppp1 OUT= MAC= SRC=192.168.66.2 DST=255.255.255.255 LEN=96 TOS=0x00 PREC=0x00 TTL=128 ID=51914 PROTO=UDP SPT=137 DPT=137 LEN=76
Apr 15 14:24:38 leila kernel: SFW2-IN-ILL-TARGET IN=ppp1 OUT= MAC= SRC=192.168.66.2 DST=255.255.255.255 LEN=96 TOS=0x00 PREC=0x00 TTL=128 ID=51917 PROTO=UDP SPT=137 DPT=137 LEN=76
Apr 15 14:24:38 leila SuSEfirewall2: Firewall rules successfully set from /etc/sysconfig/SuSEfirewall2
Apr 15 14:24:38 leila pppd[20975]: Script /etc/ppp/ip-up finished (pid 20990), status = 0x0
Apr 15 14:24:38 leila /etc/ppp/ip-up.d/freeswan: this script needs to be run from ip-up or ip-down
Apr 15 14:24:38 leila kernel: SFW2-IN-ILL-TARGET IN=ppp1 OUT= MAC= SRC=192.168.66.2 DST=255.255.255.255 LEN=96 TOS=0x00 PREC=0x00 TTL=128 ID=51919 PROTO=UDP SPT=137 DPT=137 LEN=76
Apr 15 14:24:38 leila kernel: SFW2-IN-ILL-TARGET IN=ppp1 OUT= MAC= SRC=192.168.66.2 DST=255.255.255.255 LEN=96 TOS=0x00 PREC=0x00 TTL=128 ID=51922 PROTO=UDP SPT=137 DPT=137 LEN=76

Beim nicht funktionierenden Aufbau von aussen sieht es so aus:

Zitat

Apr 15 14:28:43 leila pptpd[22001]: MGR: Launching /usr/sbin/pptpctrl to handle client
Apr 15 14:28:43 leila pptpd[22001]: CTRL: local address = 192.168.66.1
Apr 15 14:28:43 leila pptpd[22001]: CTRL: remote address = 192.168.66.2
Apr 15 14:28:43 leila pptpd[22001]: CTRL: pppd speed = 115200
Apr 15 14:28:43 leila pptpd[22001]: CTRL: pppd options file = /etc/ppp/options.pptp
Apr 15 14:28:43 leila pptpd[22001]: CTRL: Client 84.149.247.35 control connection started
Apr 15 14:28:43 leila pptpd[18921]: MGR: No free connection slots or IPs - no more clients can connect!
Apr 15 14:28:43 leila pptpd[22001]: CTRL: Received PPTP Control Message (type: 1)
Apr 15 14:28:43 leila pptpd[22001]: CTRL: Made a START CTRL CONN RPLY packet
Apr 15 14:28:43 leila pptpd[22001]: CTRL: I wrote 156 bytes to the client.
Apr 15 14:28:43 leila pptpd[22001]: CTRL: Sent packet to client
Apr 15 14:28:43 leila pptpd[22001]: CTRL: Received PPTP Control Message (type: 7)
Apr 15 14:28:43 leila pptpd[22001]: CTRL: 0 min_bps, 1525 max_bps, 32 window size
Apr 15 14:28:43 leila pptpd[22001]: CTRL: Made a OUT CALL RPLY packet
Apr 15 14:28:43 leila pptpd[22001]: CTRL: Starting call (launching pppd, opening GRE)
Apr 15 14:28:43 leila pptpd[22001]: CTRL: pty_fd = 5
Apr 15 14:28:43 leila pptpd[22001]: CTRL: tty_fd = 6
Apr 15 14:28:43 leila pptpd[22002]: CTRL (PPPD Launcher): Connection speed = 115200
Apr 15 14:28:43 leila pptpd[22002]: CTRL (PPPD Launcher): local address = 192.168.66.1
Apr 15 14:28:43 leila pptpd[22002]: CTRL (PPPD Launcher): remote address = 192.168.66.2
Apr 15 14:28:43 leila pptpd[22001]: CTRL: I wrote 32 bytes to the client.
Apr 15 14:28:43 leila pptpd[22001]: CTRL: Sent packet to client
Apr 15 14:28:43 leila pppd[22002]: pppd 2.4.2 started by root, uid 0
Apr 15 14:28:43 leila pppd[22002]: Using interface ppp1
Apr 15 14:28:43 leila pppd[22002]: Connect: ppp1 <--> /dev/pts/2
Apr 15 14:28:43 leila pptpd[22001]: CTRL: Received PPTP Control Message (type: 15)
Apr 15 14:28:43 leila pptpd[22001]: CTRL: Got a SET LINK INFO packet with standard ACCMs

Ich wäre furchtbar dankbar, wenn mir da jemand einen guten Tip geben könnte, suche nun schon mehrere Tage an dem Problem, und bin der Meinung, daß es nur ein "kleiner" Fehler sein kann ?

Vielen Dank im Voraus für Eure Bemühungen

Heiko Hannig